[netlabel/netlabel_tools] 506ab4: netlabelctl: Add support for specifying address fa...

1 view
Skip to first unread message

GitHub

unread,
Mar 4, 2016, 3:47:31 PM3/4/16
to netl...@googlegroups.com
Branch: refs/heads/working-calipso-v1
Home: https://github.com/netlabel/netlabel_tools
Commit: 506ab4b4a9c74ff8a199ab173c2d3d6d3a5a740e
https://github.com/netlabel/netlabel_tools/commit/506ab4b4a9c74ff8a199ab173c2d3d6d3a5a740e
Author: Huw Davies <h...@codeweavers.com>
Date: 2016-03-04 (Fri, 04 Mar 2016)

Changed paths:
M include/libnetlabel.h
M include/netlabel.h
M libnetlabel/mod_mgmt.c
M netlabelctl/map.c

Log Message:
-----------
netlabelctl: Add support for specifying address families.

The main user-visible change is during map add command where
one can specify a '4' or a '6' as an optional protocol extra
value for the unlabelled protocol. eg:
netlabelctl map add domain:foo_t protocol:unlbl,4
will map IPv4 addresses on domain foo_t to the unlabelled protocol.
Omitting the extra value will map all address families to that
protocol.

A similar notation is used when listing maps. Domains displayed
as:
domain:"foo_t",UNLABELED
have the mapping applied across all address families, while domains
displayed as:
domain:"foo2_t",UNLABELED,4
would have the mapping for just IPv4.

Signed-off-by: Huw Davies <h...@codeweavers.com>
Signed-off-by: Paul Moore <pa...@paul-moore.com>


Commit: cbac2ae829cb8d62a450543c5d9c1f12c3acb63b
https://github.com/netlabel/netlabel_tools/commit/cbac2ae829cb8d62a450543c5d9c1f12c3acb63b
Author: Huw Davies <h...@codeweavers.com>
Date: 2016-03-04 (Fri, 04 Mar 2016)

Changed paths:
M include/libnetlabel.h
M include/netlabel.h
M libnetlabel/Makefile.am
A libnetlabel/mod_calipso.c
A libnetlabel/mod_calipso.h
M libnetlabel/mod_mgmt.c
M libnetlabel/netlabel_init.c
M netlabelctl/Makefile.am
A netlabelctl/calipso.c
M netlabelctl/main.c
M netlabelctl/map.c
M netlabelctl/mgmt.c
M netlabelctl/netlabelctl.h

Log Message:
-----------
netlabelctl: Add CALIPSO support.

This is a direct copy of the CISPO support. The only
differences are the removal of the tags and local mode, neither
of which are applicable to CALIPSO.

Signed-off-by: Huw Davies <h...@codeweavers.com>
Signed-off-by: Paul Moore <pa...@paul-moore.com>


Commit: d9abec3c7be755e1ebeef0014f2efcd31b3d2d7a
https://github.com/netlabel/netlabel_tools/commit/d9abec3c7be755e1ebeef0014f2efcd31b3d2d7a
Author: Huw Davies <h...@codeweavers.com>
Date: 2016-03-04 (Fri, 04 Mar 2016)

Changed paths:
M netlabelctl/netlabel-config

Log Message:
-----------
netlabel-config: Extend the reset function to remove any CALIPSO DOIs.


Signed-off-by: Huw Davies <h...@codeweavers.com>
Signed-off-by: Paul Moore <pa...@paul-moore.com>


Commit: c138d388cce35411e55d53170c39aeeb70ff3b72
https://github.com/netlabel/netlabel_tools/commit/c138d388cce35411e55d53170c39aeeb70ff3b72
Author: Huw Davies <h...@codeweavers.com>
Date: 2016-03-04 (Fri, 04 Mar 2016)

Changed paths:
M doc/man/man8/netlabelctl.8

Log Message:
-----------
doc: Update docs to explain the unlabaled extra value and the calipso module.


Signed-off-by: Huw Davies <h...@codeweavers.com>
Signed-off-by: Paul Moore <pa...@paul-moore.com>


Compare: https://github.com/netlabel/netlabel_tools/compare/62665d993769...c138d388cce3
Reply all
Reply to author
Forward
0 new messages